US20070300305A1 - System and method for detecting computer port inactivity - Google Patents

System and method for detecting computer port inactivity Download PDF

Info

Publication number
US20070300305A1
US20070300305A1 US11/897,295 US89729507A US2007300305A1 US 20070300305 A1 US20070300305 A1 US 20070300305A1 US 89729507 A US89729507 A US 89729507A US 2007300305 A1 US2007300305 A1 US 2007300305A1
Authority
US
United States
Prior art keywords
connection
port
routing equipment
user computer
blocking
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
US11/897,295
Other versions
US7565699B2 (en
Inventor
Brian Gonsalves
Kenneth Jones
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Cdn Innovations LLC
Original Assignee
SBC Knowledge Ventures LP
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Family has litigation
First worldwide family litigation filed litigation Critical https://patents.darts-ip.com/?family=34063341&utm_source=google_patent&utm_medium=platform_link&utm_campaign=public_patent_search&patent=US20070300305(A1) "Global patent litigation dataset” by Darts-ip is licensed under a Creative Commons Attribution 4.0 International License.
Assigned to SBC KNOWLEDGE VENTURES, L.P. reassignment SBC KNOWLEDGE VENTURES, L.P. ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: GONSALVES, BRIAN, JONES, KENNETH ROGER
Priority to US11/897,295 priority Critical patent/US7565699B2/en
Application filed by SBC Knowledge Ventures LP filed Critical SBC Knowledge Ventures LP
Publication of US20070300305A1 publication Critical patent/US20070300305A1/en
Publication of US7565699B2 publication Critical patent/US7565699B2/en
Application granted granted Critical
Assigned to AT&T INTELLECTUAL PROPERTY I, L.P. reassignment AT&T INTELLECTUAL PROPERTY I, L.P. CHANGE OF NAME (SEE DOCUMENT FOR DETAILS). Assignors: SBC KNOWLEDGE VENTURES, L.P.
Assigned to WORCESTER TECHNOLOGIES LLC reassignment WORCESTER TECHNOLOGIES LLC ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: AT&T INTELLECTUAL PROPERTY I, LP
Assigned to AT&T KNOWLEDGE VENTURES, L.P. reassignment AT&T KNOWLEDGE VENTURES, L.P. CHANGE OF NAME (SEE DOCUMENT FOR DETAILS). Assignors: SBC KNOWLEDGE VENTURES, L.P.
Assigned to AT&T INTELLECTUAL PROPERTY I, L.P. reassignment AT&T INTELLECTUAL PROPERTY I, L.P. CHANGE OF NAME (SEE DOCUMENT FOR DETAILS). Assignors: AT&T KNOWLEDGE VENTURES, L.P.
Assigned to INTELLECTUAL VENTURES II LLC reassignment INTELLECTUAL VENTURES II LLC MERGER (SEE DOCUMENT FOR DETAILS). Assignors: WORCESTER TECHNOLOGIES LLC
Assigned to INTELLECTUAL VENTURES ASSETS 144 LLC reassignment INTELLECTUAL VENTURES ASSETS 144 LLC ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: INTELLECTUAL VENTURES II LLC
Assigned to CDN INNOVATIONS, LLC reassignment CDN INNOVATIONS, LLC ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: INTELLECTUAL VENTURES ASSETS 144 LLC
Adjusted expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic

Definitions

  • the present disclosure relates generally to broadband communications, and particularly to a system and method for detecting an unattended or idle PC with an open data port.
  • broadband modems permit data downloads at speeds far above that obtainable through a conventional dial-up modem, e.g., 33 Kb/s or 56 Kb/s.
  • a conventional dial-up modem e.g. 33 Kb/s or 56 Kb/s.
  • there are also disadvantages associated with some aspects of the technology For example, many broadband residential customers do not regularly update anti-virus software or employ firewalls/monitoring software on their broadband access computers. This leaves an unattended computer with a connection, or open port, to a wide area network. This open port is susceptible to probing and subsequent hijacking by malicious and/or unethical individuals, e.g., crackers and hackers.
  • a system for detecting an idle state in an end-user computer and subsequent blocking of the open Ethernet connection of the idle computer includes a first interface to a local area network (LAN) connection to an end-user computer and a second interface to a wide area network (WAN), such as a digital subscriber line (DSL) connection, to a distributed computer network, such as the Internet.
  • LAN local area network
  • WAN wide area network
  • DSL digital subscriber line
  • the second interface is coupled to an Internet service provider (ISP).
  • ISP Internet service provider
  • Detection logic responsive to the first interface is used to detect user inactivity at the end-user computer, and blocking logic responsive to the detection logic selectively initiates a blocking signal to disable communications received from the second interface from being sent over the first interface to the remote end-user computer.
  • the blocking logic sends the blocking signal in response to the detecting logic detecting the user inactivity for a selected period of time.
  • the selected period of time is between one and ten minutes.
  • the selected period of time is a fixed time period.
  • the selected period of time is determined by a user of the end-user computer.
  • the first interface, the detection logic, and the blocking logic are embedded within an auto-sensing Ethernet port.
  • the DSL connection carries authenticated point-to-point protocol over Ethernet (PPPoE) session traffic.
  • PPPoE point-to-point protocol over Ethernet
  • a method in a further embodiment, includes establishing a broadband connection, detecting an inactivity event, and blocking data.
  • the broadband connection includes a first local data connection, e.g., an Ethernet connection, between an end-user computer and routing equipment, as well as a second, wide area data connection, e.g., a PPPoE session, between the routing equipment and an ISP.
  • Detection of an inactivity event from the end-user computer occurs at the routing equipment, and is based upon detecting that the end-user computer has been idle for an idle time greater than an idle time activity threshold.
  • the routing equipment then blocks data originating from the second, wide area data connection from being communicated to the first local data connection, thus establishing a blocking condition.
  • the method further includes removing the blocking condition to allow communications from the second, wide area data connection to be sent to the first local data connection. Following blocking condition removal, data communications from the first local data connection is then allowed to be communicated to the second wide area data connection.
  • a method of routing data at digital subscriber line (DSL) routing equipment includes establishing a first portion of a DSL connection and establishing a second portion of the DSL connection.
  • the first portion of the DSL connection includes a local Ethernet data connection between an end-user computer and DSL routing equipment and terminates at a first port of the DSL routing equipment.
  • the second portion of the DSL connection includes a wide area data connection between the DSL routing equipment and internet service provider (ISP) equipment and terminates at a second port of the DSL routing equipment.
  • the method further includes detecting, at the first port of the DSL routing equipment, an indication that the end-user computer has been idle for an idle time greater than an idle time inactivity threshold. Further, during a first period of time, data received from the second port of the DSL routing equipment is blocked from being communicated by the first port of the DSL routing equipment.
  • the method also includes, during a second period of time after the first period of time, detecting activity at the first port of the DSL routing equipment. This detection indicates activity at the end-user computer. In response to the activity detection, data received at the second port of the DSL routing equipment would be communicated to the first port of the DSL routing equipment, and to the end-user computer.
  • FIG. 1 is a general diagram illustrating a system for router/modem configuration to detect end-user computer inactivity and/or activity and to selectively block or unblock Ethernet port access accordingly;
  • FIG. 2 is a flow diagram illustrating methods for blocking and/or unblocking Ethernet port access to a personal computer.
  • the present disclosure relates generally to broadband communications, and particularly to a system and methods for blocking external access, e.g., wide area network (WAN) access to an unattended or idle end-user personal computer (PC) with an open local area network (LAN) port.
  • WAN wide area network
  • PC personal computer
  • LAN local area network
  • FIG. 1 is a general diagram illustrating a system for router/modem configuration to detect end-user computer inactivity and/or activity, as well as to selectively block or unblock Ethernet port access accordingly.
  • the example system presented in FIG. 1 includes an end-user personal computer (PC) 104 .
  • the system also includes a first interface 108 to a local area network (LAN) Ethernet connection to the end-user computer 104 in communication with an auto sensing Ethernet port 120 in a router/modem 101 .
  • the router/modem 101 includes a second interface 110 to a wide area network (WAN) digital subscriber line (DSL) connection from a DSL port 124 to a distributed computer network 106 .
  • the distributed computer network 106 can be a public Internet protocol (IP) network, such as the Internet.
  • IP Internet protocol
  • the second interface 110 may be coupled to an Internet service provider (ISP).
  • ISP Internet service provider
  • the DSL connection of the second interface 110 carries authenticated point to point over Ethernet (PPPOE) session traffic
  • the auto sensing Ethernet port 120 includes detection logic 130 responsive to the first interface 108 and is used to detect user inactivity at the end-user computer 104 .
  • the auto sensing Ethernet port 120 also includes blocking logic 132 responsive to the detection logic 130 .
  • Blocking logic 132 is used to selectively initiate a blocking signal to disable communications received from the second interface 110 from being sent over the first interface 108 to the end-user computer 104 .
  • the detection logic 130 and the blocking logic 132 are embedded within the auto sensing Ethernet port 120 . In other embodiments, these elements may be separate components or may be integrated with other functions.
  • the blocking logic 132 sends a blocking signal in response to the detection logic 130 detecting user inactivity on PC 104 for a selected period of time.
  • the selected period of time is between one and ten minutes of inactivity, as detected by detection logic 130 .
  • the selected period of time can be a fixed time period, which may be a default time period, e.g., five minutes, or the selected period of time may also be determined by a user of the end-user computer 104 .
  • the router/modem 101 may be digital switching equipment such as a router or routing equipment, or may be a modem.
  • the modem may be an asynchronous digital subscriber line (ADSL) modem, a digital subscriber line (DSL) modem, or other xDSL modems or high-speed interfaces utilized to establish layer 2 connections, e.g., PPPoE, between an ISP and the customers of the ISP.
  • ADSL asynchronous digital subscriber line
  • DSL digital subscriber line
  • PPPoE high-speed interfaces
  • FIG. 2 is a flow diagram illustrating methods for blocking and/or unblocking Ethernet port access to a personal computer.
  • a digital subscriber line (DSL) connection is established between an end-user computer to an Internet service provider (ISP).
  • the DSL connection includes a first local data connection between an end-user computer, e.g., an Ethernet connection, and routing equipment and a second wide area network (WAN) data connection, e.g., a PPPoE session, between the routing equipment and the ISP.
  • WAN wide area network
  • both the first data connection and the second data connection are always open connections, however, this provides an “open door” for outside port scanners who may be looking for open connections to hijack.
  • the present disclosure utilizes detection logic in the routing equipment, e.g., a router or modem, to detect that an end-user computer has been idle for an idle time greater than an idle time inactivity threshold to determine that an inactivity event has occurred at the routing equipment, as in step 204 .
  • the idle time inactivity threshold or specified amount of time of inactivity by the end-user computer, can be a fixed threshold defining a fixed amount of time, or can be a programmable threshold.
  • a method for receiving user defined idle time information may be employed. This method would permit the modification of the idle time inactivity threshold to be set based upon the user's defined idle time information.
  • the routing equipment 101 blocks all communication data originating from the second connection (i.e. the WAN connection) to the Ethernet connection (i.e. LAN connection to PC), as in step 206 .
  • the second connection i.e. the WAN connection
  • the Ethernet connection i.e. LAN connection to PC
  • step 206 This, in effect, closes the open Ethernet connection port, thus providing an element of security to the unattended end-user computer.
  • a connection cannot be hijacked if it is not available, i.e., is not open.
  • the routing equipment detects the activity from the end-user computer and removes the blocking condition to allow communications from the WAN data connection to be sent to the Ethernet connection of the end-user computer via the routing equipment, as in step 208 .
  • This unblocking step also may include allowing data to be sent from the Ethernet connection of the end-user computer via the routing equipment to the WAN data connection of the ISP, since the end-user computer is no longer unattended. At this point, a normal DSL connection has been reestablished.

Abstract

A system and method for detecting computer port inactivity are disclosed. In one embodiment, a system includes a router that has a first interface to communicate with a first connection at an end-user computer and a second interface to communicate with a second connection at a distributed computer network. The system includes detection logic responsive to the first interface to detect inactivity at the end-user computer and further includes blocking logic responsive to the detection logic. The blocking logic is operable to selectively initiate a blocking signal to disable communicating data received at the second interface to the end-user computer via the first interface. The detection logic and the blocking logic are embedded within a port of the router.

Description

    CLAIM OF PRIORITY
  • This application is a continuation application of, and claims priority to, U.S. patent application Ser. No. 10/623,274, filed Jul. 18, 2003, the content of which is expressly incorporated herein by reference in its entirety.
  • FIELD OF THE DISCLOSURE
  • The present disclosure relates generally to broadband communications, and particularly to a system and method for detecting an unattended or idle PC with an open data port.
  • DESCRIPTION OF THE RELATED ART
  • The widespread deployment of consumer broadband access, e.g., xDSL and/or cable modems, has benefited millions of subscribers by providing reliable, high speed Internet access. Broadband modems permit data downloads at speeds far above that obtainable through a conventional dial-up modem, e.g., 33 Kb/s or 56 Kb/s. However, as with many new technologies, there are also disadvantages associated with some aspects of the technology. For example, many broadband residential customers do not regularly update anti-virus software or employ firewalls/monitoring software on their broadband access computers. This leaves an unattended computer with a connection, or open port, to a wide area network. This open port is susceptible to probing and subsequent hijacking by malicious and/or unethical individuals, e.g., crackers and hackers.
  • A prominent recent case involving the use of zombies, or computers that are owned by third parties but taken over (hijacked) by crackers, was the Yahoo denial-of service (DoS) incident. In this incident, daemons (disk and execution monitors) were surreptitiously set up to generate spurious requests for information to Yahoo (and other sites such as Amazon, CNN, and eBay), at rates of up to one gigabyte per second, effectively shutting down Yahoo's equipment.
  • Subsequent investigations of the Yahoo DoS incident revealed that a majority of the owners of the computers that sent the spurious requests had broadband Internet access and were not even aware that their computers had been turned into zombies and used to carry out the DoS attack. Some people recalled noticing that their broadband connection seemed somewhat slower, but many people were not even at their computers during the times the attack was in progress.
  • Another troublesome recent development is the use of a virus sent to computer users to take over or hijack other people's computers to make them junk e-mail (spam) senders. Unlike most other mass-mailing viruses, this virus, dubbed AVF, doesn't e-mail itself to everyone in the infected computer's address book, but instead provides a backdoor into the computer. This backdoor is then utilized by spammers to send junk mail, providing anonymity for the spammers' illegal activities.
  • Scrupulous use of anti-virus software with regular updates and the use of personal firewall and/or monitoring software could prevent the creation of zombie computers and hijacks. Turning off the unattended computer also provides protection. However, many people do not avail themselves of these options for various reasons ranging from lack of technical savvy to time constraints, or failing to understand the magnitude of the problem.
  • Accordingly, a need exists to provide additional security to unattended PCs with “always on” network connections.
  • SUMMARY
  • In a particular embodiment, a system for detecting an idle state in an end-user computer and subsequent blocking of the open Ethernet connection of the idle computer is presented. The system includes a first interface to a local area network (LAN) connection to an end-user computer and a second interface to a wide area network (WAN), such as a digital subscriber line (DSL) connection, to a distributed computer network, such as the Internet. In a particular embodiment, the second interface is coupled to an Internet service provider (ISP). Detection logic responsive to the first interface is used to detect user inactivity at the end-user computer, and blocking logic responsive to the detection logic selectively initiates a blocking signal to disable communications received from the second interface from being sent over the first interface to the remote end-user computer.
  • In a particular embodiment, the blocking logic sends the blocking signal in response to the detecting logic detecting the user inactivity for a selected period of time. In one embodiment, the selected period of time is between one and ten minutes. In another embodiment, the selected period of time is a fixed time period. In a further embodiment, the selected period of time is determined by a user of the end-user computer.
  • In a particular embodiment, the first interface, the detection logic, and the blocking logic are embedded within an auto-sensing Ethernet port. In another embodiment, the DSL connection carries authenticated point-to-point protocol over Ethernet (PPPoE) session traffic.
  • In a further embodiment, a method is disclosed that includes establishing a broadband connection, detecting an inactivity event, and blocking data. The broadband connection includes a first local data connection, e.g., an Ethernet connection, between an end-user computer and routing equipment, as well as a second, wide area data connection, e.g., a PPPoE session, between the routing equipment and an ISP. Detection of an inactivity event from the end-user computer occurs at the routing equipment, and is based upon detecting that the end-user computer has been idle for an idle time greater than an idle time activity threshold. The routing equipment then blocks data originating from the second, wide area data connection from being communicated to the first local data connection, thus establishing a blocking condition.
  • In another embodiment, the method further includes removing the blocking condition to allow communications from the second, wide area data connection to be sent to the first local data connection. Following blocking condition removal, data communications from the first local data connection is then allowed to be communicated to the second wide area data connection.
  • In a particular embodiment, a method of routing data at digital subscriber line (DSL) routing equipment is presented. The method includes establishing a first portion of a DSL connection and establishing a second portion of the DSL connection. The first portion of the DSL connection includes a local Ethernet data connection between an end-user computer and DSL routing equipment and terminates at a first port of the DSL routing equipment. The second portion of the DSL connection includes a wide area data connection between the DSL routing equipment and internet service provider (ISP) equipment and terminates at a second port of the DSL routing equipment. The method further includes detecting, at the first port of the DSL routing equipment, an indication that the end-user computer has been idle for an idle time greater than an idle time inactivity threshold. Further, during a first period of time, data received from the second port of the DSL routing equipment is blocked from being communicated by the first port of the DSL routing equipment.
  • In a particular embodiment, the method also includes, during a second period of time after the first period of time, detecting activity at the first port of the DSL routing equipment. This detection indicates activity at the end-user computer. In response to the activity detection, data received at the second port of the DSL routing equipment would be communicated to the first port of the DSL routing equipment, and to the end-user computer.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • FIG. 1 is a general diagram illustrating a system for router/modem configuration to detect end-user computer inactivity and/or activity and to selectively block or unblock Ethernet port access accordingly; and
  • FIG. 2 is a flow diagram illustrating methods for blocking and/or unblocking Ethernet port access to a personal computer.
  • DETAILED DESCRIPTION OF THE DRAWINGS
  • The present disclosure relates generally to broadband communications, and particularly to a system and methods for blocking external access, e.g., wide area network (WAN) access to an unattended or idle end-user personal computer (PC) with an open local area network (LAN) port. Employing the techniques disclosed herein provides an element of security to unattended PCs, and does not require end-users to install/configure additional hardware or software, thereby providing an element of convenience as well as connection security to end-users.
  • FIG. 1 is a general diagram illustrating a system for router/modem configuration to detect end-user computer inactivity and/or activity, as well as to selectively block or unblock Ethernet port access accordingly. The example system presented in FIG. 1 includes an end-user personal computer (PC) 104. The system also includes a first interface 108 to a local area network (LAN) Ethernet connection to the end-user computer 104 in communication with an auto sensing Ethernet port 120 in a router/modem 101. The router/modem 101 includes a second interface 110 to a wide area network (WAN) digital subscriber line (DSL) connection from a DSL port 124 to a distributed computer network 106. The distributed computer network 106 can be a public Internet protocol (IP) network, such as the Internet. The second interface 110 may be coupled to an Internet service provider (ISP). In a particular embodiment, the DSL connection of the second interface 110 carries authenticated point to point over Ethernet (PPPOE) session traffic.
  • The auto sensing Ethernet port 120 includes detection logic 130 responsive to the first interface 108 and is used to detect user inactivity at the end-user computer 104. The auto sensing Ethernet port 120 also includes blocking logic 132 responsive to the detection logic 130. Blocking logic 132 is used to selectively initiate a blocking signal to disable communications received from the second interface 110 from being sent over the first interface 108 to the end-user computer 104. In an exemplary embodiment, the detection logic 130 and the blocking logic 132 are embedded within the auto sensing Ethernet port 120. In other embodiments, these elements may be separate components or may be integrated with other functions.
  • The blocking logic 132 sends a blocking signal in response to the detection logic 130 detecting user inactivity on PC 104 for a selected period of time. In a particular embodiment, the selected period of time is between one and ten minutes of inactivity, as detected by detection logic 130. In other embodiments, the selected period of time can be a fixed time period, which may be a default time period, e.g., five minutes, or the selected period of time may also be determined by a user of the end-user computer 104.
  • The router/modem 101 may be digital switching equipment such as a router or routing equipment, or may be a modem. The modem may be an asynchronous digital subscriber line (ADSL) modem, a digital subscriber line (DSL) modem, or other xDSL modems or high-speed interfaces utilized to establish layer 2 connections, e.g., PPPoE, between an ISP and the customers of the ISP.
  • FIG. 2 is a flow diagram illustrating methods for blocking and/or unblocking Ethernet port access to a personal computer. In step 202, a digital subscriber line (DSL) connection is established between an end-user computer to an Internet service provider (ISP). The DSL connection includes a first local data connection between an end-user computer, e.g., an Ethernet connection, and routing equipment and a second wide area network (WAN) data connection, e.g., a PPPoE session, between the routing equipment and the ISP.
  • Typically, both the first data connection and the second data connection are always open connections, however, this provides an “open door” for outside port scanners who may be looking for open connections to hijack. However, the present disclosure utilizes detection logic in the routing equipment, e.g., a router or modem, to detect that an end-user computer has been idle for an idle time greater than an idle time inactivity threshold to determine that an inactivity event has occurred at the routing equipment, as in step 204. The idle time inactivity threshold, or specified amount of time of inactivity by the end-user computer, can be a fixed threshold defining a fixed amount of time, or can be a programmable threshold. Further, a method for receiving user defined idle time information may be employed. This method would permit the modification of the idle time inactivity threshold to be set based upon the user's defined idle time information.
  • In response to detection of an inactivity event at the Ethernet port to the end-user computer and in response to blocking logic, the routing equipment 101 blocks all communication data originating from the second connection (i.e. the WAN connection) to the Ethernet connection (i.e. LAN connection to PC), as in step 206. This, in effect, closes the open Ethernet connection port, thus providing an element of security to the unattended end-user computer. Generally, a connection cannot be hijacked if it is not available, i.e., is not open.
  • Once a user returns to actively using the computer, the routing equipment detects the activity from the end-user computer and removes the blocking condition to allow communications from the WAN data connection to be sent to the Ethernet connection of the end-user computer via the routing equipment, as in step 208. This unblocking step also may include allowing data to be sent from the Ethernet connection of the end-user computer via the routing equipment to the WAN data connection of the ISP, since the end-user computer is no longer unattended. At this point, a normal DSL connection has been reestablished.
  • The system and methods described herein provides for a flexible implementation. Although the invention has been described using certain specific examples, it will be apparent to those skilled in the art that the invention is not limited to these few examples. Additionally, various types of routers, routing equipment, and/or modems are currently available which could be suitable for use in detecting and blocking idle connections for Ethernet communication sessions when employing the methods and system as taught herein. The above-disclosed subject matter is to be considered illustrative and not restrictive and the appended claims are intended to cover all such modifications, enhancements, and other embodiments which fall within the true spirit and scope of the present invention. Thus, to the maximum extent allowed by law, the scope of the present invention is to be determined by the broadest permissible interpretation of the following claims and their equivalents, and shall not be restricted or limited by the foregoing detailed description.

Claims (20)

1. A system comprising:
a router, including:
a first interface to communicate with a first connection at an end-user computer;
a second interface to communicate with a second connection at a distributed computer network;
detection logic responsive to the first interface to detect inactivity at the end-user computer; and
blocking logic responsive to the detection logic, the blocking logic to selectively initiate a blocking signal to disable communicating data received at the second interface to the end-user computer via the first interface,
wherein the detection logic and the blocking logic are embedded within a port of the router.
2. The system of claim 1, wherein the port is an auto-sensing port.
3. The system of claim 1, wherein the port is an Ethernet port.
4. The system of claim 1, wherein the first connection is a local area network connection.
5. The system of claim 4, wherein the blocking logic is adapted to disable communications received at the second interface from being sent over the first interface.
6. The system of claim 5, wherein the blocking logic is further adapted to allow communications to be sent over the first interface to at least one other end-user computer in the local area network.
7. The system of claim 1, wherein the detection logic is adapted to detect user inactivity at the end-user computer.
8. The system of claim 1, wherein the second connection is a wide area network connection.
9. A method comprising:
detecting that an end-user computer coupled to routing equipment has been idle for an idle time greater than an idle time inactivity threshold and determining an inactivity event at the routing equipment; and
initiating a blocking signal to block data received at the routing equipment via a wide area network data connection from being communicated from the routing equipment to the end-user computer via the first local data connection;
wherein the detecting and the initiating the blocking signal are performed by logic that is embedded within a port of the routing equipment.
10. The method of claim 9, wherein the port is an auto-sensing port.
11. The method of claim 9, wherein the port is an Ethernet port.
12. The method of claim 9, further comprising establishing a connection at the routing equipment, the connection including a first local data connection between the end-user computer and the routing equipment.
13. The method of claim 12, wherein the connection further includes the wide area network data connection between the routing equipment and an internet service provider.
14. The method of claim 12, wherein the connection includes a digital subscriber line connection between the end-user computer and an internet service provider.
15. The method of claim 9, wherein the routing equipment is a digital subscriber line routing equipment.
16. A method comprising:
establishing a first portion of a connection at routing equipment, the first portion of the connection including a local data connection between an end-user computer and the routing equipment, the first portion of the connection terminating at a first port of the routing equipment,
establishing a second portion of the connection, the second portion of the connection including a wide area data connection between the routing equipment and internet service provider equipment, the second portion of the connection terminating at a second port of the routing equipment;
detecting at the first port of the routing equipment an indication that the end-user computer has been idle for an idle time greater than an idle time inactivity threshold; and
during a first period of time, initiating a blocking signal at routing equipment, the blocking signal blocking data received from the second port of the routing equipment from being communicated via the first port of the routing equipment;
wherein detection logic and blocking logic are embedded within a port of the routing equipment.
17. The method of claim 16, wherein the port is an auto-sensing port.
18. The method of claim 16, wherein the port is an Ethernet port.
19. The method of claim 16, wherein the connection is a digital subscriber line connection.
20. The method of claim 16, further comprising, during a second period of time after the first period of time:
detecting activity at the first port of the routing equipment indicating activity at the end-user computer; and
communicating data received at the second port of the routing equipment to the first port of the routing equipment and to the end-user computer.
US11/897,295 2003-07-18 2007-08-30 System and method for detecting computer port inactivity Expired - Lifetime US7565699B2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US11/897,295 US7565699B2 (en) 2003-07-18 2007-08-30 System and method for detecting computer port inactivity

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US10/623,274 US7293291B2 (en) 2003-07-18 2003-07-18 System and method for detecting computer port inactivity
US11/897,295 US7565699B2 (en) 2003-07-18 2007-08-30 System and method for detecting computer port inactivity

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US10/623,274 Continuation US7293291B2 (en) 2003-07-18 2003-07-18 System and method for detecting computer port inactivity

Publications (2)

Publication Number Publication Date
US20070300305A1 true US20070300305A1 (en) 2007-12-27
US7565699B2 US7565699B2 (en) 2009-07-21

Family

ID=34063341

Family Applications (2)

Application Number Title Priority Date Filing Date
US10/623,274 Expired - Lifetime US7293291B2 (en) 2003-07-18 2003-07-18 System and method for detecting computer port inactivity
US11/897,295 Expired - Lifetime US7565699B2 (en) 2003-07-18 2007-08-30 System and method for detecting computer port inactivity

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US10/623,274 Expired - Lifetime US7293291B2 (en) 2003-07-18 2003-07-18 System and method for detecting computer port inactivity

Country Status (2)

Country Link
US (2) US7293291B2 (en)
WO (1) WO2005010655A2 (en)

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110004931A1 (en) * 1996-11-29 2011-01-06 Ellis Iii Frampton E Global network computers for shared processing
US20110225645A1 (en) * 2010-01-26 2011-09-15 Ellis Frampton E Basic architecture for secure internet computers
US20110231926A1 (en) * 2010-01-29 2011-09-22 Ellis Frampton E Basic architecture for secure internet computers
US8255986B2 (en) 2010-01-26 2012-08-28 Frampton E. Ellis Methods of securely controlling through one or more separate private networks an internet-connected computer having one or more hardware-based inner firewalls or access barriers
US8321926B1 (en) * 2008-12-02 2012-11-27 Lockheed Martin Corporation System and method of protecting a system that includes unprotected computer devices
US8429735B2 (en) 2010-01-26 2013-04-23 Frampton E. Ellis Method of using one or more secure private networks to actively configure the hardware of a computer or microchip
US8516033B2 (en) 1996-11-29 2013-08-20 Frampton E. Ellis, III Computers or microchips with a hardware side protected by a primary internal hardware firewall leaving an unprotected hardware side connected to a network, and with multiple internal hardware compartments protected by multiple secondary interior hardware firewalls
US8555370B2 (en) 1996-11-29 2013-10-08 Frampton E Ellis Microchips with an internal hardware firewall
US8627444B2 (en) 1996-11-29 2014-01-07 Frampton E. Ellis Computers and microchips with a faraday cage, with a side protected by an internal hardware firewall and unprotected side connected to the internet for network operations, and with internal hardware compartments
US8677026B2 (en) 1996-11-29 2014-03-18 Frampton E. Ellis, III Computers and microchips with a portion protected by an internal hardware firewalls
US8726303B2 (en) 1996-11-29 2014-05-13 Frampton E. Ellis, III Microchips with an internal hardware firewall that by its location leaves unprotected microprocessors or processing units which performs processing with a network
US8739195B2 (en) 1996-11-29 2014-05-27 Frampton E. Ellis, III Microchips with an internal hardware firewall protected portion and a network portion with microprocessors which execute shared processing operations with the network
US9568946B2 (en) 2007-11-21 2017-02-14 Frampton E. Ellis Microchip with faraday cages and internal flexibility sipes

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7421589B2 (en) * 2004-07-21 2008-09-02 Beachhead Solutions, Inc. System and method for lost data destruction of electronic data stored on a portable electronic device using a security interval
US8667106B2 (en) * 2005-05-20 2014-03-04 At&T Intellectual Property Ii, L.P. Apparatus for blocking malware originating inside and outside an operating system
US8601065B2 (en) * 2006-05-31 2013-12-03 Cisco Technology, Inc. Method and apparatus for preventing outgoing spam e-mails by monitoring client interactions
US20070300312A1 (en) * 2006-06-22 2007-12-27 Microsoft Corporation Microsoft Patent Group User presence detection for altering operation of a computing system
US7661050B2 (en) * 2007-05-04 2010-02-09 International Business Machines Corporation Method and system for formal verification of partial good self test fencing structures
US20120278179A1 (en) * 2011-04-28 2012-11-01 Ray Campbell Systems and methods for deducing user information from input device behavior
US11755510B2 (en) 2011-11-08 2023-09-12 Seagate Technology Llc Data detection and device optimization
US8819187B1 (en) 2013-10-29 2014-08-26 Limelight Networks, Inc. End-to-end acceleration of dynamic content
US10454899B1 (en) * 2015-03-16 2019-10-22 Amazon Technologies, Inc. Controlling firewall ports in virtualized environments through public key cryptography

Citations (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6145083A (en) * 1998-04-23 2000-11-07 Siemens Information And Communication Networks, Inc. Methods and system for providing data and telephony security
US6272127B1 (en) * 1997-11-10 2001-08-07 Ehron Warpspeed Services, Inc. Network for providing switched broadband multipoint/multimedia intercommunication
US6351452B1 (en) * 1999-01-19 2002-02-26 Carrier Access Corporation Telecommunication device with centralized processing, redundancy protection, and on-demand insertion of signaling bits
US6389464B1 (en) * 1997-06-27 2002-05-14 Cornet Technology, Inc. Device management system for managing standards-compliant and non-compliant network elements using standard management protocols and a universal site server which is configurable from remote locations via internet browser technology
US6445682B1 (en) * 1998-10-06 2002-09-03 Vertical Networks, Inc. Systems and methods for multiple mode voice and data communications using intelligently bridged TDM and packet buses and methods for performing telephony and data functions using the same
US6477579B1 (en) * 1996-04-10 2002-11-05 Worldgate Service, Inc. Access system and method for providing interactive access to an information source through a networked distribution system
US6477595B1 (en) * 1999-10-25 2002-11-05 E-Cell Technologies Scalable DSL access multiplexer with high reliability
US6498791B2 (en) * 1998-04-03 2002-12-24 Vertical Networks, Inc. Systems and methods for multiple mode voice and data communications using intelligently bridged TDM and packet buses and methods for performing telephony and data functions using the same
US6510152B1 (en) * 1997-12-31 2003-01-21 At&T Corp. Coaxial cable/twisted pair fed, integrated residence gateway controlled, set-top box
US6526581B1 (en) * 1999-08-03 2003-02-25 Ucentric Holdings, Llc Multi-service in-home network with an open interface
US6553489B1 (en) * 2000-01-12 2003-04-22 Cisco Technology, Inc. System and method for secure and efficient universal port configuration
US6560222B1 (en) * 1998-04-03 2003-05-06 Vertical Networks, Inc. Systems and methods for multiple voice and data communications using intelligently bridged TDM and packet buses and methods for performing telephony and data functions using the same
US6559769B2 (en) * 2001-10-01 2003-05-06 Eric Anthony Early warning real-time security system
US6584502B1 (en) * 1999-06-29 2003-06-24 Cisco Technology, Inc. Technique for providing automatic event notification of changing network conditions to network elements in an adaptive, feedback-based data network
US6594695B1 (en) * 1999-12-08 2003-07-15 Covad Communitions Group, Inc. Network profiling system
US6614781B1 (en) * 1998-11-20 2003-09-02 Level 3 Communications, Inc. Voice over data telecommunications network architecture
US6631120B1 (en) * 1999-07-30 2003-10-07 Cisco Technology, Inc. System and method for determining a communication protocol of a communication device operating on digital subscriber lines
US6631436B1 (en) * 2000-08-31 2003-10-07 Comptrend Compound Platform for selectively providing a channel service unit/data service unit, a router/bridge, and a dial-up modem
US6636505B1 (en) * 1999-05-28 2003-10-21 3Com Corporation Method for service provisioning a broadband modem
US6807666B1 (en) * 1999-12-15 2004-10-19 Microsoft Corporation Methods and arrangements for providing multiple concurrent desktops and workspaces in a shared computing environment

Patent Citations (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6477579B1 (en) * 1996-04-10 2002-11-05 Worldgate Service, Inc. Access system and method for providing interactive access to an information source through a networked distribution system
US6389464B1 (en) * 1997-06-27 2002-05-14 Cornet Technology, Inc. Device management system for managing standards-compliant and non-compliant network elements using standard management protocols and a universal site server which is configurable from remote locations via internet browser technology
US6272127B1 (en) * 1997-11-10 2001-08-07 Ehron Warpspeed Services, Inc. Network for providing switched broadband multipoint/multimedia intercommunication
US6510152B1 (en) * 1997-12-31 2003-01-21 At&T Corp. Coaxial cable/twisted pair fed, integrated residence gateway controlled, set-top box
US6560222B1 (en) * 1998-04-03 2003-05-06 Vertical Networks, Inc. Systems and methods for multiple voice and data communications using intelligently bridged TDM and packet buses and methods for performing telephony and data functions using the same
US6498791B2 (en) * 1998-04-03 2002-12-24 Vertical Networks, Inc. Systems and methods for multiple mode voice and data communications using intelligently bridged TDM and packet buses and methods for performing telephony and data functions using the same
US6145083A (en) * 1998-04-23 2000-11-07 Siemens Information And Communication Networks, Inc. Methods and system for providing data and telephony security
US6445682B1 (en) * 1998-10-06 2002-09-03 Vertical Networks, Inc. Systems and methods for multiple mode voice and data communications using intelligently bridged TDM and packet buses and methods for performing telephony and data functions using the same
US6614781B1 (en) * 1998-11-20 2003-09-02 Level 3 Communications, Inc. Voice over data telecommunications network architecture
US6351452B1 (en) * 1999-01-19 2002-02-26 Carrier Access Corporation Telecommunication device with centralized processing, redundancy protection, and on-demand insertion of signaling bits
US6636505B1 (en) * 1999-05-28 2003-10-21 3Com Corporation Method for service provisioning a broadband modem
US6584502B1 (en) * 1999-06-29 2003-06-24 Cisco Technology, Inc. Technique for providing automatic event notification of changing network conditions to network elements in an adaptive, feedback-based data network
US6631120B1 (en) * 1999-07-30 2003-10-07 Cisco Technology, Inc. System and method for determining a communication protocol of a communication device operating on digital subscriber lines
US6526581B1 (en) * 1999-08-03 2003-02-25 Ucentric Holdings, Llc Multi-service in-home network with an open interface
US6477595B1 (en) * 1999-10-25 2002-11-05 E-Cell Technologies Scalable DSL access multiplexer with high reliability
US6594695B1 (en) * 1999-12-08 2003-07-15 Covad Communitions Group, Inc. Network profiling system
US6807666B1 (en) * 1999-12-15 2004-10-19 Microsoft Corporation Methods and arrangements for providing multiple concurrent desktops and workspaces in a shared computing environment
US6553489B1 (en) * 2000-01-12 2003-04-22 Cisco Technology, Inc. System and method for secure and efficient universal port configuration
US6631436B1 (en) * 2000-08-31 2003-10-07 Comptrend Compound Platform for selectively providing a channel service unit/data service unit, a router/bridge, and a dial-up modem
US6559769B2 (en) * 2001-10-01 2003-05-06 Eric Anthony Early warning real-time security system

Cited By (30)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9021011B2 (en) 1996-11-29 2015-04-28 Frampton E. Ellis Computer or microchip including a network portion with RAM memory erasable by a firewall-protected master controller
US9172676B2 (en) 1996-11-29 2015-10-27 Frampton E. Ellis Computer or microchip with its system bios protected by one or more internal hardware firewalls
US8739195B2 (en) 1996-11-29 2014-05-27 Frampton E. Ellis, III Microchips with an internal hardware firewall protected portion and a network portion with microprocessors which execute shared processing operations with the network
US9531671B2 (en) 1996-11-29 2016-12-27 Frampton E. Ellis Computer or microchip controlled by a firewall-protected master controlling microprocessor and firmware
US9183410B2 (en) 1996-11-29 2015-11-10 Frampton E. Ellis Computer or microchip with an internal hardware firewall and a master controlling device
US20110004931A1 (en) * 1996-11-29 2011-01-06 Ellis Iii Frampton E Global network computers for shared processing
US8892627B2 (en) 1996-11-29 2014-11-18 Frampton E. Ellis Computers or microchips with a primary internal hardware firewall and with multiple internal harware compartments protected by multiple secondary interior hardware firewalls
US8726303B2 (en) 1996-11-29 2014-05-13 Frampton E. Ellis, III Microchips with an internal hardware firewall that by its location leaves unprotected microprocessors or processing units which performs processing with a network
US8516033B2 (en) 1996-11-29 2013-08-20 Frampton E. Ellis, III Computers or microchips with a hardware side protected by a primary internal hardware firewall leaving an unprotected hardware side connected to a network, and with multiple internal hardware compartments protected by multiple secondary interior hardware firewalls
US8555370B2 (en) 1996-11-29 2013-10-08 Frampton E Ellis Microchips with an internal hardware firewall
US8561164B2 (en) 1996-11-29 2013-10-15 Frampton E. Ellis, III Computers and microchips with a side protected by an internal hardware firewall and an unprotected side connected to a network
US8627444B2 (en) 1996-11-29 2014-01-07 Frampton E. Ellis Computers and microchips with a faraday cage, with a side protected by an internal hardware firewall and unprotected side connected to the internet for network operations, and with internal hardware compartments
US8677026B2 (en) 1996-11-29 2014-03-18 Frampton E. Ellis, III Computers and microchips with a portion protected by an internal hardware firewalls
US9568946B2 (en) 2007-11-21 2017-02-14 Frampton E. Ellis Microchip with faraday cages and internal flexibility sipes
US8321926B1 (en) * 2008-12-02 2012-11-27 Lockheed Martin Corporation System and method of protecting a system that includes unprotected computer devices
US8429735B2 (en) 2010-01-26 2013-04-23 Frampton E. Ellis Method of using one or more secure private networks to actively configure the hardware of a computer or microchip
US20110225645A1 (en) * 2010-01-26 2011-09-15 Ellis Frampton E Basic architecture for secure internet computers
US8474033B2 (en) 2010-01-26 2013-06-25 Frampton E. Ellis Computer or microchip with a master controller connected by a secure control bus to networked microprocessors or cores
US8898768B2 (en) 2010-01-26 2014-11-25 Frampton E. Ellis Computer or microchip with a secure control bus connecting a central controller to volatile RAM and the volatile RAM to a network-connected microprocessor
US9003510B2 (en) 2010-01-26 2015-04-07 Frampton E. Ellis Computer or microchip with a secure system bios having a separate private network connection to a separate private network
US8813212B2 (en) 2010-01-26 2014-08-19 Frampton E. Ellis Computer or microchip with a master controller connected by a secure control bus to networked microprocessors or cores
US11683288B2 (en) 2010-01-26 2023-06-20 Frampton E. Ellis Computer or microchip with a secure system bios having a separate private network connection to a separate private network
US9009809B2 (en) 2010-01-26 2015-04-14 Frampton E. Ellis Computer or microchip with a secure system BIOS and a secure control bus connecting a central controller to many network-connected microprocessors and volatile RAM
US8255986B2 (en) 2010-01-26 2012-08-28 Frampton E. Ellis Methods of securely controlling through one or more separate private networks an internet-connected computer having one or more hardware-based inner firewalls or access barriers
US10965645B2 (en) 2010-01-26 2021-03-30 Frampton E. Ellis Computer or microchip with a secure system bios having a separate private network connection to a separate private network
US8869260B2 (en) 2010-01-26 2014-10-21 Frampton E. Ellis Computer or microchip with a master controller connected by a secure control bus to networked microprocessors or cores
US10057212B2 (en) 2010-01-26 2018-08-21 Frampton E. Ellis Personal computer, smartphone, tablet, or server with a buffer zone without circuitry forming a boundary separating zones with circuitry
US10375018B2 (en) 2010-01-26 2019-08-06 Frampton E. Ellis Method of using a secure private network to actively configure the hardware of a computer or microchip
US8171537B2 (en) 2010-01-29 2012-05-01 Ellis Frampton E Method of securely controlling through one or more separate private networks an internet-connected computer having one or more hardware-based inner firewalls or access barriers
US20110231926A1 (en) * 2010-01-29 2011-09-22 Ellis Frampton E Basic architecture for secure internet computers

Also Published As

Publication number Publication date
US20050015615A1 (en) 2005-01-20
WO2005010655A2 (en) 2005-02-03
US7565699B2 (en) 2009-07-21
WO2005010655A3 (en) 2005-04-14
US7293291B2 (en) 2007-11-06

Similar Documents

Publication Publication Date Title
US7565699B2 (en) System and method for detecting computer port inactivity
US7457965B2 (en) Unauthorized access blocking apparatus, method, program and system
US8490190B1 (en) Use of interactive messaging channels to verify endpoints
JP4501280B2 (en) Method and apparatus for providing network and computer system security
US8533837B2 (en) System and method for network edge data protection
US7984493B2 (en) DNS based enforcement for confinement and detection of network malicious activities
US9391956B2 (en) System and method for providing network and computer firewall protection with dynamic address isolation to a device
US9160755B2 (en) Trusted communication network
US7930740B2 (en) System and method for detection and mitigation of distributed denial of service attacks
US8844035B2 (en) Techniques for network protection based on subscriber-aware application proxies
Dubrawsky Firewall evolution-deep packet inspection
US20050265351A1 (en) Network administration
US8301712B1 (en) System and method for protecting mail servers from mail flood attacks
JP2002073433A (en) Break-in detecting device and illegal break-in measures management system and break-in detecting method
Rights SANS Institute InfoSec Reading Room
WO2007055770A2 (en) Trusted communication network
US8203941B2 (en) Virus/worm throttle threshold settings
Cisco Configuring Context-Based Access Control
Shaw Leveraging good intentions to reduce unwanted network traffic
Schweitzer Internet Security Made Easy: A Plain-English Guide to Protecting Yourself and Your Company Online
Tsai et al. A network safety-defense mechanism with the Linux security module
Martin et al. Security Issues of VoIP
JP2004350090A (en) Interface device
Ranum A Whirlwind Introduction to Honeypots
Argyraki et al. Protecting Public-Access Sites Against Distributed Denial-of-Service Attacks

Legal Events

Date Code Title Description
AS Assignment

Owner name: SBC KNOWLEDGE VENTURES, L.P., NEVADA

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:GONSALVES, BRIAN;JONES, KENNETH ROGER;REEL/FRAME:019819/0615

Effective date: 20031114

FEPP Fee payment procedure

Free format text: PAYOR NUMBER ASSIGNED (ORIGINAL EVENT CODE: ASPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

STCF Information on status: patent grant

Free format text: PATENTED CASE

FEPP Fee payment procedure

Free format text: PAYER NUMBER DE-ASSIGNED (ORIGINAL EVENT CODE: RMPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

Free format text: PAYOR NUMBER ASSIGNED (ORIGINAL EVENT CODE: ASPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

AS Assignment

Owner name: AT&T INTELLECTUAL PROPERTY I, L.P., GEORGIA

Free format text: CHANGE OF NAME;ASSIGNOR:SBC KNOWLEDGE VENTURES, L.P.;REEL/FRAME:026755/0203

Effective date: 20071001

AS Assignment

Owner name: WORCESTER TECHNOLOGIES LLC, DELAWARE

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:AT&T INTELLECTUAL PROPERTY I, LP;REEL/FRAME:027241/0681

Effective date: 20110923

AS Assignment

Owner name: AT&T INTELLECTUAL PROPERTY I, L.P., NEVADA

Free format text: CHANGE OF NAME;ASSIGNOR:AT&T KNOWLEDGE VENTURES, L.P.;REEL/FRAME:027244/0339

Effective date: 20071001

Owner name: AT&T KNOWLEDGE VENTURES, L.P., NEVADA

Free format text: CHANGE OF NAME;ASSIGNOR:SBC KNOWLEDGE VENTURES, L.P.;REEL/FRAME:027244/0297

Effective date: 20060224

FPAY Fee payment

Year of fee payment: 4

AS Assignment

Owner name: INTELLECTUAL VENTURES II LLC, DELAWARE

Free format text: MERGER;ASSIGNOR:WORCESTER TECHNOLOGIES LLC;REEL/FRAME:030638/0027

Effective date: 20130523

FPAY Fee payment

Year of fee payment: 8

AS Assignment

Owner name: INTELLECTUAL VENTURES ASSETS 144 LLC, DELAWARE

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:INTELLECTUAL VENTURES II LLC;REEL/FRAME:050884/0952

Effective date: 20191031

AS Assignment

Owner name: CDN INNOVATIONS, LLC, GEORGIA

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:INTELLECTUAL VENTURES ASSETS 144 LLC;REEL/FRAME:051406/0748

Effective date: 20191115

MAFP Maintenance fee payment

Free format text: PAYMENT OF MAINTENANCE FEE, 12TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1553); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

Year of fee payment: 12